Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/cbwhrSgajG9aMV3GRlkvlaBu5MY.roa
File: cbwhrSgajG9aMV3GRlkvlaBu5MY.roa (raw, json)
Hash identifier: KXMi7tC7cZcsui2/EEjbxC6NnweD/SHb6NBbOeRT4U0=
Subject key identifier: 71:BC:21:AD:28:1A:8C:6F:5A:31:5D:C6:46:59:2F:95:A0:6E:E4:C6
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01856FF03FD1085BD61E5DFC26D45FA48D04
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/cbwhrSgajG9aMV3GRlkvlaBu5MY.roa
Signing time: Mon 02 Jan 2023 00:44:54 +0000
ROA not before: Mon 02 Jan 2023 00:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210526
IP address blocks: 185.179.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:3f:d1:08:5b:d6:1e:5d:fc:26:d4:5f:a4:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 2 00:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71bc21ad281a8c6f5a315dc646592f95a06ee4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:79:6d:e0:1b:0d:10:6d:e1:e6:3e:ea:12:
43:f0:30:b9:f2:3f:cf:90:8c:67:03:9f:19:77:96:
d3:0e:29:90:29:a7:36:2a:14:11:43:e0:59:1c:59:
ec:cf:d7:77:dc:d9:1a:93:a5:a9:5f:e3:fb:40:f2:
55:6b:81:ee:c3:e8:0b:b0:56:6c:08:40:96:68:a1:
42:6e:db:37:98:3d:aa:4d:62:ce:d9:fa:0f:cb:e8:
2a:2e:d7:08:ca:81:7e:36:1c:bb:ea:05:91:50:d5:
8f:34:a3:5d:7f:c6:8c:a0:f5:3b:7f:66:5d:8f:75:
f4:08:67:4a:81:ab:f8:61:61:f7:ec:c6:6e:74:0c:
0e:5f:ab:b6:2d:58:7e:cc:96:00:b8:81:fd:9f:26:
6d:42:a4:ef:92:db:aa:39:e3:d4:a7:b7:43:da:c7:
7a:ac:74:75:c8:b7:6b:c9:68:40:9e:f5:cb:c7:2f:
0d:12:d7:54:79:f2:6e:90:10:1d:1d:db:d3:0e:82:
4a:f6:c1:78:19:ec:86:51:52:74:e7:76:ea:b8:3b:
fc:ea:e5:bc:ce:9c:ea:d1:9e:3e:92:dd:97:35:26:
64:64:a2:f0:ab:4b:99:e9:63:70:42:a6:a5:42:5e:
d2:3c:91:11:41:7f:38:6f:af:e6:ae:d9:74:b8:02:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BC:21:AD:28:1A:8C:6F:5A:31:5D:C6:46:59:2F:95:A0:6E:E4:C6
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/cbwhrSgajG9aMV3GRlkvlaBu5MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:71:8a:e3:ea:13:c5:b9:77:9b:30:25:e2:fd:f6:3d:b8:04:
23:85:20:69:24:78:32:cf:b9:d8:f5:4d:ab:21:9b:3f:76:c2:
f0:e3:ad:3f:db:a5:09:8b:b0:ba:5d:02:be:7e:ff:63:7f:84:
e1:39:31:54:72:d0:2d:e1:0a:c1:e8:ca:ce:0f:cc:3e:2b:b4:
39:63:c1:ad:16:fe:b2:7f:eb:b3:3d:1d:4f:ad:ea:5b:74:e2:
88:ab:3c:30:d9:f1:4e:c7:52:49:37:46:7f:a1:af:09:2e:58:
76:84:dc:2a:5e:94:d5:77:3e:bd:71:0c:41:2f:70:d9:15:e6:
86:01:04:be:5d:b0:92:a0:af:16:ea:72:8b:d1:95:6e:c7:3f:
8d:20:ab:15:1f:8b:23:ba:7a:57:f5:ae:7d:03:7b:09:01:9c:
74:de:f1:ef:2a:76:83:fd:56:d9:cc:58:8f:0b:de:6c:6a:70:
e8:e5:0f:1a:68:7c:d4:cd:3c:d1:b5:41:2a:d5:9b:cb:34:64:
5d:a0:78:7a:ff:d3:6b:b4:36:4a:21:03:31:62:aa:f7:d1:41:
69:62:da:69:11:d7:45:f6:86:d3:07:49:4b:29:1d:19:12:9a:
a8:9f:10:61:25:29:21:29:c7:b7:ee:89:b4:fd:27:f5:bb:04:
f0:0d:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:34 2024 by rpki-client on console-ams.rpki-client.org